From e7c8b9218afb2180c769714ab3625292c76f4de5 Mon Sep 17 00:00:00 2001 From: lwandzura <51929958+lwandzura@users.noreply.github.com> Date: Tue, 28 Dec 2021 12:03:37 -0600 Subject: [PATCH] FGA update (#3513) * Removed optional, added coarse permission req * added admin verbiage * refined language * Update content/enterprise_influxdb/v1.9/guides/fine-grained-authorization.md Co-authored-by: kelseiv <47797004+kelseiv@users.noreply.github.com> * reworded step 3 * update format, remove note * clarified wording * clarified wording Co-authored-by: kelseiv <47797004+kelseiv@users.noreply.github.com> Co-authored-by: Kelly --- .../v1.9/guides/fine-grained-authorization.md | 20 ++++++++++++++++--- 1 file changed, 17 insertions(+), 3 deletions(-) diff --git a/content/enterprise_influxdb/v1.9/guides/fine-grained-authorization.md b/content/enterprise_influxdb/v1.9/guides/fine-grained-authorization.md index c9cadfbb5..efdc3eeab 100644 --- a/content/enterprise_influxdb/v1.9/guides/fine-grained-authorization.md +++ b/content/enterprise_influxdb/v1.9/guides/fine-grained-authorization.md @@ -48,14 +48,28 @@ In a typical cluster configuration, the HTTP ports for data nodes You may need to work with your network administrator to gain access to the meta node HTTP ports. {{% /note %}} -4. _(Optional)_ [Create roles](#manage-roles). - Roles let you grant permissions to groups of users assigned to each role. +4. Create users. Do the following: + 1. As Administrator, create users and grant users all permissions. The example below grants users `east` and `west` all permissions on the `datacenters` database. + + ```sql + CREATE DATABASE datacenters + + CREATE USER east WITH PASSWORD 'east' + GRANT ALL ON datacenters TO east + + CREATE USER west WITH PASSWORD 'west' + GRANT ALL ON datacenters TO west + ``` + + 2. Add fine-grained permissions to users as needed. + +5. [Create roles](#manage-roles) to grant permissions to users assigned to a role. {{% note %}} For an overview of how users and roles work in InfluxDB Enterprise, see [InfluxDB Enterprise users](/enterprise_influxdb/v1.9/features/users/). {{% /note %}} -5. [Set up restrictions](#manage-restrictions). +6. [Set up restrictions](#manage-restrictions). Restrictions apply to all non-admin users. {{% note %}}